7a9331f3cfa3d8ddeb2825bcc8c95b0dc26c9c0d7022d49484f2fc5ae106b0b8

Analysis

max time kernel
92s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
25/09/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.apk
Size 12.5MB
Sample260925-pr6gdaeb88
SHA256 7a9331f3cfa3d8ddeb2825bcc8c95b0dc26c9c0d7022d49484f2fc5ae106b0b8
MD5 87c005b63c395f780c791cdd11dadb86
SHA1 f22134b38047304cc00828dbd2793e368e8a485c
SHA512 d43890a8b7a7ec71bdb59ebb489f32c53bae16158a54138d7575e2cfb8b254fe90387b5d2854e8069274f64eff0b613fa83654dc42a26e3437408c20c49b4d45
SSDEEP 393216:EEssycD6O0uSaHREV0dW7S1F2ZTQykFWYrG:VtycDSuRNg7qgZTX3YrG
TLSH
T156D61286F758992FCC7790724DAE5632114B4C958E4397977E08730C28BBAE80F99BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.webviewgold.myappname
/system/xbin/su	com.webviewgold.myappname
/data/local/xbin/su	com.webviewgold.myappname
/system/sd/xbin/su	com.webviewgold.myappname
/system/bin/failsafe/su	com.webviewgold.myappname
/data/local/su	com.webviewgold.myappname
/system/app/Superuser.apk	com.webviewgold.myappname
/sbin/su	com.webviewgold.myappname
/data/local/bin/su	com.webviewgold.myappname

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.webviewgold.myappname/[email protected]	4782	com.webviewgold.myappname

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.webviewgold.myappname

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.webviewgold.myappname

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.webviewgold.myappname

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.webviewgold.myappname

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.webviewgold.myappname

com.webviewgold.myappname
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4782

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

SummaryNotificationIds.db

Path /data/data/com.webviewgold.myappname/databases/SummaryNotificationIds.db
Size 20KB
SHA256 314f20e0e49d7e9febfb7c25a5e13665ce0b305b541c89a733c90d5823f9d276
MD5 8b7f7181d6921a57f53386379535ba7d
SHA1 38eff20390c04a1b0a621f1938506f0aee04865a
SHA512 88f36cbd2867c4056140f34bd407be7d733e98760e74f1ee48e5b5ae21695a278970ff4fd3d369aa02119aa3ee6a94dc3cbb18b502bfc7f48dacd8e06600628c
SSDEEP 12:TLyKPGYuOXNr2rt0rZd8rpj++ar/artRmBEyPbAVOw:TLy3pOX1803GSE
TLSH
T164922BC7A300125AEE9E20B35067C3D15D73626D8AE3864B1BD70420AD41284E5A6E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SummaryNotificationIds.db-journal

Path /data/data/com.webviewgold.myappname/databases/SummaryNotificationIds.db-journal
Size 512B
SHA256 d6a3f1c0d0bf5235d2a5e2250cb5b62146aca08268d616bb0a7e94baed355376
MD5 0d8f66ef0b99a9023548dc071c0152ce
SHA1 1b6c9c7af7ca0d2e2d22f3551f8d3d238e47f333
SHA512 68aa72f1ad831544eb208c732b6376f1c23e29280dc261ef1de7223a571d66227da151ab8c40ee9e2413a254bf2715fa6fb4d13d8ce4dfab89d610281923930a
MD5 SHA1 SHA512

Submit Download

SummaryNotificationIds.db-journal

Path /data/data/com.webviewgold.myappname/databases/SummaryNotificationIds.db-journal
Size 8KB
SHA256 550c1be5d253c74f5f98815b3af4591646e0b346539004b8852eed0b21e6ce6c
MD5 3f7a8201ff9a972f8af06eea512b4691
SHA1 7b011981f13ca7b875dc572c1e7984a0bdafd721
SHA512 5ad266552c6bbf1e75bb6fa51daed6d01406aa6d44703f12bce555f0379d4098dd1c005aef8771dba71293fb5c15c809a02605bdcf665c868f4cf13ef73d6c4a
SSDEEP 6:7+/l9Ta1rmHn1ex/kWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKr:7+txa1zsWqLiuWdYRmBEyPbQ
TLSH
T19F02C08D73800813C82D267790F683400D00EB2D9172CF27169208B43C0BECCF4A0D0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SummaryNotificationIds.db-journal

Path /data/data/com.webviewgold.myappname/databases/SummaryNotificationIds.db-journal
Size 8KB
SHA256 cfd7b188bd36cc5d6d94095cd2f7e27194750d47bd9b4076008e8157eecabcea
MD5 353f04f7a859aa9be72d43b30af995c1
SHA1 5ce1dfda267d069b8bd2f1b1737ac6b7f4b94b6c
SHA512 19ec6638121e8b9abaa3293d5465b4fc5a16a701b3b59bffc7872d6d61bed35f0b46da00482bfdcbc067fdf6be8c5404e343cbe7313e4ee48e0ba205ddae4211
SSDEEP 6:7+/l9iPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKqbM/r:7+toqLJdeWRmBEyPbbAr
TLSH
T1D102C088A74A0803C03D177FB0C883401F58B728A333CB0F26B218543C4B6CCE8D0D80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SummaryNotificationIds.db-journal

Path /data/data/com.webviewgold.myappname/databases/SummaryNotificationIds.db-journal
Size 12KB
SHA256 2daa8bd7fd8bd40dc36760a832540c9aef2125133dbddd3247b259b1b7e174f3
MD5 ad20c2c26ab236740842c5329c2b9f10
SHA1 82462b92ba9922e94debc582ec1d18fbd509abc7
SHA512 c8756ecf635762b18a24a8ebfb5594151a9e248532e7f431ba354069dd8d9ef87b23d972473cd70f9434c6c33a67d645195dd35865fc15c7cf29cbb139a2769b
SSDEEP 12:7+t+8UYfqLmGGYuOXNr2rt0rZd8rpj++ar/artRmBEyPbTj:7+tbqLmpOX1803GS/
TLSH
T168425CCA77002356E99F64B2446383C12833129CC5E385071AD70425FC427C4D1D6E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.webviewgold.myappname/databases/com.google.android.datatransport.events
Size 56KB
SHA256 f62d9a453f1f322c553e9d6e6a3f9084766d4c70f2a83e390ee347b395b473ec
MD5 040e1c5a02511b85cbe16d53cf2bbc0e
SHA1 ec2877c7ddd226581bb29c4e1db3e3dd8d041960
SHA512 b618f7a148825bfcb886a5e552310adf3f54d70938471af03ee51109a751e3a5071b750d90beb28b747da3e13017aa22dcc2254b4a1df9b27d11cf5213b5654d
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSyOFv4Fb:rAMEX0wIyNjayF
TLSH
T15343649D1B3C3220C56D283ED3E143A35B3CE3DF571693723AA44CF98DC246978259A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download